fr
en

Symantec Endpoint Protection Manager Reset Admin Password High Quality <Updated 2025>

Resetting the Admin Password for Symantec Endpoint Protection Manager

If you've forgotten the admin password for your Symantec Endpoint Protection Manager (SEPM), don't worry – resetting it is a manageable process. The steps below will guide you through recovering access to your SEPM. symantec endpoint protection manager reset admin password

Step 2: Run the Utility

  1. Right-click on ResetPass.bat.
  2. Select Run as administrator.
    • Important: You must run this as an administrator, otherwise, the tool may fail to update the database credentials.
  3. A Command Prompt window will open briefly and then close automatically.

Method 3: Using Command Line Tools

SEPM provides command-line tools for various administrative tasks, including password reset. Right-click on ResetPass

  1. Navigate to the SEPM Installation Directory.
  2. Use the provided command-line utility to reset the password. The exact command can vary:
    sepmcli.exe --resetpassword --username=admin --newpassword=newpassword
    
    Replace admin and newpassword with your admin username and the new password.

Part 2: Prerequisites – What You Need Before Starting

Before attempting any password reset, ensure the following: Important: You must run this as an administrator,

  1. Local Administrative Access: You must have Windows Administrator privileges on the machine hosting SEPM.
  2. Console Access to the Server: You need to log into the server’s desktop environment (RDP or physical console).
  3. Service Account Knowledge: Identify if SEPM services run under a domain service account or Local System. (If you use a domain account that has expired or changed password, fix that first via Windows Services.)
  4. Backup (Highly Recommended): Backup the SEPM database and the C:\Program Files (x86)\Symantec\Symantec Endpoint Protection Manager\ directory. In-place edits are safe, but a backup is insurance.

Warning: Do not uninstall SEPM to “fix” the password. Uninstalling removes the database and all policies.


5. Document the DBA Password

During SEPM installation, you set a DBA password for the embedded database (default sql). If you changed it, document it. Method 2 fails without this password.